USN-8544-1: LuaJIT vulnerabilities
It was discovered that LuaJIT incorrectly handled certain inputs. An attacker could possibly use these issues to cause a crash, resulting in a denial of service, or execute arbitrary code.
CSIRTS triage
- What
- LuaJIT incorrectly handles certain inputs, potentially leading to a crash or arbitrary code execution.
- Who is affected
- Users of LuaJIT are affected.
- Urgency
- Remediation is urgent due to the potential for denial of service and remote code execution.
- Action
- Update to the latest version of LuaJIT.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch LuaJIT
Get an email when a new LuaJIT advisory drops — max one per day, one-click unsubscribe.
Details
Original advisory: https://ubuntu.com/security/notices/USN-8544-1
Exploitation outlook
EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.
- Low exploitation riskCVE-2024-251780.54% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 42% of all scored CVEs.
- Low exploitation riskCVE-2024-251770.46% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 37% of all scored CVEs.
- Low exploitation riskCVE-2024-251760.48% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 39% of all scored CVEs.
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2024-25178 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-25177 | coverage & exploitation status | NVD · CVE.org |
| CVE-2024-25176 | coverage & exploitation status | NVD · CVE.org |
More from Ubuntu Security Notices
- highUSN-8620-4: Linux kernel (Intel IoTG) vulnerabilities2026-07-31
- highUSN-8620-3: Linux kernel (Intel IoTG) vulnerabilities2026-07-31
- unknownUSN-8625-1: OpenSSL vulnerability2026-07-30
- unknownUSN-8624-1: Sinatra vulnerability2026-07-29
- unknownUSN-8623-1: Linux kernel (NVIDIA) vulnerabilities2026-07-29